According to Mr. Smith, "hosting providers, businesses, and people with a cloud server who set up their own DNS resolver" often neglect to configure their servers using proper security settings.

WSJ: Cyberattack on Spam Fighter Said to Be Over